Show the HTTP method, a public or placeholder URL, required headers without secrets, a minimal request body, and the expected response shape. Add the actual status and error for a failing case. Use obviously fake IDs and data.
Do not publish bearer tokens, session cookies, private endpoints, or a real customer's payload. If authentication is necessary to reproduce, describe the type and scope of credential rather than its value. Test the example with a disposable account or local mock, and note whether retries can create duplicate resources.
The best example demonstrates one behavior without depending on your private environment.